New commits:
commit ade763b72213b3339d3f834b8dda837677cf70d3
Author: Andrew Cagney <[email protected]>
Date:   Thu Dec 13 11:03:23 2018 -0500

    ikev2: add debug-logging to diagnose state lookups for a response
    
    Why is the exchange type needed?  Surely state machine will figure out
    if the state X exchange is valid?
    
    Lets find out.
    
    Why is a CHILD SA specific and then an IKE SA specific lookup
    needed?  Surely a Message ID uniquely identifies the IKE or CHILD that
    sent the request?
    
    Lets find out.
    
    What happens when a duplicate response is received?  For instance, IKE
    SAs send requests with no state change.  Unless the state's Message ID
    is being thwacked, it will match and, potentially cause a
    re-processing of the state.  Perhaps that is why the IX parameter is
    needed?
    
    Lets find out.

_______________________________________________
Swan-commit mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-commit

Reply via email to